# Va. Code Ann. § 38.2-627: Powers and duties of the Commission; exclusive state standards

> Virginia · Statutes · In force

URL: https://www.frixlaw.com/law-library/statutes/STATE_VA_T38.2_C6_A2_S38.2-627

## Section

- **Citation:** Va. Code Ann. § 38.2-627
- **Heading:** Powers and duties of the Commission; exclusive state standards
- **Jurisdiction:** Virginia
- **Kind:** Statutes
- **Status:** In force
- **Text as of:** August 14, 2026
- **Source:** Compiled text
- **Location:** Virginia Code / Title 38.2 / Chapter 6 / Article 2 / Section 38.2-627

## Text

A. The Commissioner may examine and investigate the affairs of any licensee to determine whether a licensee has been or is engaged in any conduct in violation of this article. This power is in addition to the powers that the Commissioner has under Article 4 of Chapter 13 ( 38.2-1300 et seq.) and Chapter 18 ( 38.2-1800 et seq.). Any such investigation or examination shall be conducted pursuant to Chapters 13 and 18.

B. Whenever the Commissioner has reason to believe that a licensee has been or is engaged in conduct in the Commonwealth that violates this article, the Commissioner may take action that is necessary or appropriate to enforce the provisions of this article.

C. The Commission may examine and investigate the affairs of any insurance-support organization that acts on behalf of an insurance institution or agent as defined in § 38.2-602 and that either (i) transacts business in the Commonwealth or (ii) transacts business outside the Commonwealth and has an effect on a person residing in the Commonwealth, in order to determine whether the insurance-support organization has been or is engaged in any conduct in violation of this article.

D. The Commission shall adopt rules and regulations implementing the provisions of this article.

E. This article and any rules adopted pursuant to this article establish the exclusive state standards applicable to licensees for data security, the security of nonpublic information, the investigation of cybersecurity events, and notification of cybersecurity events for those individuals and entities subject to this article.

2020, c. 264 .

## Nearby sections

- [Va. Code Ann. § 38.2-621 Definitions](https://www.frixlaw.com/law-library/statutes/STATE_VA_T38.2_C6_A2_S38.2-621.md)
- [Va. Code Ann. § 38.2-622 Private cause of action; neither created nor curtailed](https://www.frixlaw.com/law-library/statutes/STATE_VA_T38.2_C6_A2_S38.2-622.md)
- [Va. Code Ann. § 38.2-623 Information security program](https://www.frixlaw.com/law-library/statutes/STATE_VA_T38.2_C6_A2_S38.2-623.md)
- [Va. Code Ann. § 38.2-624 Investigation of a cybersecurity event](https://www.frixlaw.com/law-library/statutes/STATE_VA_T38.2_C6_A2_S38.2-624.md)
- [Va. Code Ann. § 38.2-625 Notice to Commissioner](https://www.frixlaw.com/law-library/statutes/STATE_VA_T38.2_C6_A2_S38.2-625.md)
- [Va. Code Ann. § 38.2-626 Notice to consumers](https://www.frixlaw.com/law-library/statutes/STATE_VA_T38.2_C6_A2_S38.2-626.md)
- [Va. Code Ann. § 38.2-627 Powers and duties of the Commission; exclusive state standards](https://www.frixlaw.com/law-library/statutes/STATE_VA_T38.2_C6_A2_S38.2-627.md)
- [Va. Code Ann. § 38.2-628 Confidentiality](https://www.frixlaw.com/law-library/statutes/STATE_VA_T38.2_C6_A2_S38.2-628.md)
- [Va. Code Ann. § 38.2-629 Exceptions](https://www.frixlaw.com/law-library/statutes/STATE_VA_T38.2_C6_A2_S38.2-629.md)

---

Source: Frix Law Library, https://www.frixlaw.com/law-library/statutes/STATE_VA_T38.2_C6_A2_S38.2-627. Check the current official text before relying on it. Not legal advice.